
$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft
File: 3F67057F77B86603B6C216FF577CB3146053E4E5.mft (raw, json)
Hash identifier: nN2/8M+ffcTQm5WPj/1Xl2ynnG8j+REGPzEfKwicqx0=
Subject key identifier: 47:84:D7:37:E6:FE:E0:6D:67:C6:F8:F4:D9:2B:34:B9:82:B9:1A:9D
Authority key identifier: 3F:67:05:7F:77:B8:66:03:B6:C2:16:FF:57:7C:B3:14:60:53:E4:E5
Certificate issuer: /CN=A91301EE0000/serialNumber=3F67057F77B86603B6C216FF577CB3146053E4E5
Certificate serial: 0877EBC2B76497490A51EA0D825AFE3DE06C7D5D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P2cFf3e4ZgO2whb_V3yzFGBT5OU.cer
Subject info access: rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft
Manifest number: 0246
Signing time: Fri 24 Jul 2026 08:09:44 +0000
Manifest this update: Fri 24 Jul 2026 08:04:44 +0000
Manifest next update: Sat 25 Jul 2026 11:02:44 +0000
Files and hashes: 1: 3F67057F77B86603B6C216FF577CB3146053E4E5.crl (hash: sjrawOzV4T1TmTJHQP+GTkVaKwpzWhoukKN1X1MUM8E=)
2: 3136352e39392e3132342e302f32332d3234203d3e20343031363832.roa (hash: LEjTWe6fpK8sHggE9hBQ7iuKgwnA3HoC/5f5zkwhZbE=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.crl
rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P2cFf3e4ZgO2whb_V3yzFGBT5OU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 11:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:77:eb:c2:b7:64:97:49:0a:51:ea:0d:82:5a:fe:3d:e0:6c:7d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91301EE0000, serialNumber=3F67057F77B86603B6C216FF577CB3146053E4E5
Validity
Not Before: Jul 24 08:04:44 2026 GMT
Not After : Jul 25 11:02:44 2026 GMT
Subject: CN=4784D737E6FEE06D67C6F8F4D92B34B982B91A9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fd:43:c6:0f:db:76:1c:98:1e:c8:ca:f0:0a:
89:06:19:75:5f:08:80:3a:b9:5e:d5:d4:50:9b:66:
34:d9:c0:7d:60:ed:47:e6:1f:a2:ca:40:c5:5b:db:
99:cb:03:ae:80:4c:fc:44:ea:8b:e4:a9:98:47:ae:
57:c8:ad:98:6d:a7:37:89:f5:5a:bb:d1:34:61:2a:
e3:64:1f:11:cd:26:ff:54:aa:6d:d3:07:6b:98:f2:
ea:05:a9:07:f2:98:ff:02:3d:85:23:97:4e:ae:be:
75:8d:92:13:f2:89:0b:58:89:af:93:db:9d:e7:42:
be:91:fa:15:77:b2:0f:16:ff:06:77:4f:8c:61:61:
82:20:af:a0:8b:ec:22:59:66:0e:86:d9:d7:d8:ac:
99:77:6b:87:ed:ad:52:92:93:ac:3e:e6:6c:10:d0:
0c:30:28:6a:c2:06:21:48:8b:2f:63:37:87:86:7e:
33:e0:98:1e:49:55:38:40:c1:76:c4:1e:25:0b:fe:
7c:09:ba:30:a7:1b:d9:4c:c0:9d:e2:6c:8b:f9:1f:
85:31:3e:3e:a1:ba:d3:8d:e2:c2:fd:cb:87:d6:90:
29:95:83:3e:7f:29:54:7d:9c:20:48:2e:4a:c5:5c:
7c:c6:4b:86:d3:57:58:ac:b3:36:0b:c1:13:0b:57:
f3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:84:D7:37:E6:FE:E0:6D:67:C6:F8:F4:D9:2B:34:B9:82:B9:1A:9D
X509v3 Authority Key Identifier:
keyid:3F:67:05:7F:77:B8:66:03:B6:C2:16:FF:57:7C:B3:14:60:53:E4:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P2cFf3e4ZgO2whb_V3yzFGBT5OU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:42:3c:8a:6a:0a:e5:01:96:9a:40:66:7f:33:76:1d:f4:2c:
4d:c4:0d:2b:bf:04:e0:9d:ac:30:a2:2f:45:3e:1c:15:bd:99:
38:d2:e9:82:55:da:95:70:96:78:fa:cd:f6:37:e0:46:53:a4:
aa:ea:ee:e6:3f:ae:b8:fa:f7:19:91:6c:c6:7d:32:86:cf:4b:
7e:21:32:4a:93:b3:cf:a7:3d:7f:f3:fd:d8:a9:6f:5b:ce:6c:
02:e4:89:a6:3e:ab:a2:12:67:f5:e4:9b:be:35:59:ed:63:20:
88:ef:b0:3c:c0:e3:fb:6f:34:3c:cb:b6:36:aa:fc:a0:52:e3:
75:98:a5:b0:e1:95:10:17:72:cc:ea:4f:cd:d4:47:dc:23:e6:
db:aa:98:e5:50:3b:1f:96:6b:e3:46:d4:33:ad:a2:b5:39:25:
02:ad:1c:ee:50:78:31:eb:bc:53:0c:26:61:af:99:4d:c0:1b:
70:1a:4d:83:fc:1c:b1:90:8a:4d:f1:96:51:28:df:84:94:19:
3c:98:31:05:10:ee:f8:ff:3e:19:c2:f2:63:ca:c7:a1:c5:80:
23:29:71:de:26:9d:0c:3b:22:19:cc:29:12:e6:85:fc:7e:0d:
d9:2f:0e:29:2e:78:1a:46:46:3e:ff:ac:09:bd:59:ee:17:0b:
15:54:bd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:49:48 2026 by rpki-client